Overview

overview

10

Static

static

10

2884-23-0x...ry.exe

windows7-x64

2884-23-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2884-23-0x0000000000400000-0x000000000040C000-memory.dmp

  • Size

    48KB

  • Sample

    241106-pafjmaypcw

  • MD5

    7397305cbd9697404035348469061cbc

  • SHA1

    c14bbf1e11b88155cd969cb7c89d60f8bb0233a1

  • SHA256

    110b91b999dc3f20939c49626e35adeda86e22ecb8d44c5cbc0d1faf5adaeb50

  • SHA512

    30c0b9fb9a6ae4d95daa25202ac8e15b6cc7ae24d23850f658874bfc46a2d38ffe6f4559999cf18bc361d7469362f16e83232dcdd4fd51db724a5402f608287b

  • SSDEEP

    384:8c6ze6e1PAhJVzC3tC1im/BsTx46PgZ0rap9HBmRvR6JZlbw8hqIusZzZzI:Ye9EJLN/yRpcnuj

Score
10/10
njratneuf

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

neuf

C2

doddyfire.linkpc.net:10000

Mutex

e1a87040f2026369a233f9ae76301b7b

Attributes
  • reg_key

    e1a87040f2026369a233f9ae76301b7b

  • splitter

    |'|'|

Targets

    • Target

      2884-23-0x0000000000400000-0x000000000040C000-memory.dmp

    • Size

      48KB

    • MD5

      7397305cbd9697404035348469061cbc

    • SHA1

      c14bbf1e11b88155cd969cb7c89d60f8bb0233a1

    • SHA256

      110b91b999dc3f20939c49626e35adeda86e22ecb8d44c5cbc0d1faf5adaeb50

    • SHA512

      30c0b9fb9a6ae4d95daa25202ac8e15b6cc7ae24d23850f658874bfc46a2d38ffe6f4559999cf18bc361d7469362f16e83232dcdd4fd51db724a5402f608287b

    • SSDEEP

      384:8c6ze6e1PAhJVzC3tC1im/BsTx46PgZ0rap9HBmRvR6JZlbw8hqIusZzZzI:Ye9EJLN/yRpcnuj

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks